Anders Schack-Mulligen
0561c65b61
Dataflow: Rename noPrunedViableImplInCallContext to viableImplNotCallContextReduced.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
aa87243e3a
Dataflow: Rename prunedViableImplInCallContext to viableImplCallContextReduced
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
ace369faa8
Dataflow: Share getCallContextCall in DataFlowImplCommon::CallContextSensitivity.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
b2e3d784f6
Dataflow: Share getCallContextReturn in DataFlowImplCommon::CallContextSensitivity.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
79b1cd7d3d
Dataflow: Refactor getLocalCc to avoid reference to NodeEx.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
eb0b92350a
Dataflow: Switch column order in viableImplCallContextReducedReverse.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
86e6d0b1e1
Dataflow: Switch local call contexts to use canonical representative.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
012e1b498d
Dataflow: Remove duplicate definitions
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
bc8ca1af86
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
486eaad566
Shared: Add MakeSets module.
2024-05-27 11:01:51 +02:00
Paolo Tranquilli
f9674d1b3a
Update .github/workflows/build-ripunzip.yml
...
Co-authored-by: Cornelius Riemenschneider <cornelius@github.com >
2024-05-27 11:01:05 +02:00
Paolo Tranquilli
546d644765
Swift: do not use codeql_pkg_files needlessly
2024-05-27 10:46:50 +02:00
Tom Hvitved
686879a2a3
Ruby: Add up/downgrade scripts
2024-05-27 10:39:22 +02:00
Tom Hvitved
94d2e9591d
Tree-sitter: Emit empty_location relation to avoid scan
2024-05-27 10:39:21 +02:00
Cornelius Riemenschneider
44f666c90a
Merge pull request #16585 from github/criemen/ruby-codeql-extractor-hack
...
Ruby: Change how we pull in `shared/tree-sitter-extractor` dependency
2024-05-27 10:32:16 +02:00
Paolo Tranquilli
0b7a4257d7
Bazel: use {CODEQL_PLATFORM} as discriminant between arch and generic contents
2024-05-27 10:31:19 +02:00
am0o0
71dfdfaa92
remove the debug query
2024-05-27 09:33:10 +02:00
am0o0
2b929c4d2d
remove old expected test file
2024-05-25 20:45:34 +02:00
am0o0
1fc481ce81
v2: it is basically the first stable version :))
2024-05-25 20:43:36 +02:00
am0o0
ea05b297a3
update expected test files
2024-05-25 19:40:37 +02:00
am0o0
c2f96a1352
fix a document
2024-05-25 19:35:20 +02:00
am0o0
14daf58767
update tests, add test cases for query with local sources
2024-05-25 18:17:56 +02:00
am0o0
8fde8c2db4
change test dir name
2024-05-25 13:54:31 +02:00
am0o0
b397f57357
change queries id according to new naming
2024-05-25 13:53:33 +02:00
am0o0
300c82a8ff
use Verification instead of validation in files name
2024-05-25 13:52:32 +02:00
am0o0
76beffb04a
change dir name
2024-05-25 13:49:34 +02:00
am0o0
f1533f40b6
change query files name
2024-05-25 13:49:01 +02:00
am0o0
d2d945c66d
merge all JWT pkgs into one
2024-05-25 13:47:43 +02:00
am0o0
4af4040bd6
change duplicate query IDs
2024-05-25 13:29:16 +02:00
am0o0
f905ac10c4
add jsonWebToken library file to remove duplicate predicate declrations
2024-05-25 13:28:13 +02:00
am0o0
5d98ec33ab
stash: add debug query
2024-05-25 13:06:41 +02:00
am0o0
d77513579f
update tests
2024-05-25 12:15:25 +02:00
Am
2226f5126b
Merge branch 'main' into amammad-js-hardcodedJWTKey
2024-05-25 13:40:46 +03:30
am0o0
4e365e242c
fix conflict
2024-05-25 12:08:05 +02:00
am0o0
20c087ce39
update tests
2024-05-25 12:06:07 +02:00
am0o0
c299b5657a
Revert "stash"
...
This reverts commit bdee99ae88
2024-05-25 12:03:00 +02:00
am0o0
1860af075d
fix conflict
2024-05-25 12:01:12 +02:00
Remco Vermeulen
6df4c8964b
Rewrite recommendations
...
- Replace segmentation fault with crash that is platform agnostic (I think segmentation fault is not really a thing on Windows).
- Replace security vulnerability with malicious code execution. This provides a range of issues, because a crash (previously segmentation fault) could also be considered a security vulnerability. Namely a DOS.
- Removed the additional note on stack allocated arrays which seem confusing because we are always talking about buffers allocated on the heap.
2024-05-24 16:10:42 -07:00
Cornelius Riemenschneider
d30ed54bfd
Merge branch 'main' into criemen/bazel-csharp
2024-05-24 18:02:20 +02:00
Paolo Tranquilli
5d4b61c365
Bazel: replace prebuilt ripunzip from workflow
2024-05-24 17:44:39 +02:00
Paolo Tranquilli
8d5fa9583e
Add ripunzip build workflow
2024-05-24 17:37:59 +02:00
Cornelius Riemenschneider
b09f3c1c0d
Don't build with cross any longer.
...
We've removed cross from the internal build when converting to bazel,
mirror that here.
2024-05-24 16:17:37 +02:00
Paolo Tranquilli
b9064c5446
Bazel: fail install on ripunzip failing
2024-05-24 15:50:16 +02:00
Cornelius Riemenschneider
8c46b61e85
Ruby: Change how we pull in shared/tree-sitter-extractor dependency
...
Previously, we pulled in the shared tree-sitter extractor via a `git`
dependency in `Cargo.toml` to address a `rules_rust` limitation (no `path`
dependencies outside of the cargo workspace)). This was a problem,
as that means we're cloning `github/codeql` _again_ for the build, which is
quite slow.
I found another way that is faster, and still produces correct builds
for both `cargo`` and `rules_rust`:
* Cargo depends on a fake crate that has the same dependencies as the real crate (thanks to `sync-files.py`). Therefore, cargo pulls in the right dependencies into the lockfile, which bazel targets
* For local builds, we override the path to that dependency in a cargo config, so we're pulling in the correct code
* rules_rust only uses `path` dependencies for collecting transitive dependencies, it never pulls in the code from there. So far that, we manually provide a `BUILD.bazel` file for the shared extractor, and depend on that.
2024-05-24 15:37:35 +02:00
Cornelius Riemenschneider
5fa1b57aaa
Merge pull request #16586 from hvitved/rust-bump
...
Python: Use Rust 1.74
2024-05-24 15:30:15 +02:00
Paolo Tranquilli
f35f077c76
Swift: cleanup tools scripts in pack
2024-05-24 15:24:15 +02:00
Paolo Tranquilli
e990d75a8f
Bazel: use codeql platform as arch zip filename
2024-05-24 15:23:51 +02:00
Paolo Tranquilli
ea01ae6534
Swift: fix integration test log upload
2024-05-24 14:29:22 +02:00
Paolo Tranquilli
fa2c626e49
Bazel: add fat macOS ripunzip binary
2024-05-24 14:29:02 +02:00
Paolo Tranquilli
dcbf42d29c
Bazel: reorganize LFS files and add licensing information
2024-05-24 14:26:22 +02:00
